Is there a way to restrict by size of the database Like olde osquery #general

Is there a way to restrict by size of the database...

10/13/2021, 5:01 PM

Is there a way to restrict by size of the database. Like oldest getting expired

zwass

10/13/2021, 5:03 PM

Yes, see

--buffered_log_max

--events_max

--events_expiry

Zander Mackie

10/13/2021, 5:03 PM

10/13/2021, 5:05 PM

I will take a look thanks

3 Views